SANS360 - 您是推动宇宙中人工智能负责任使用的绝地武士吗？.pdf

1、Are you a Are you a J.E.D.I?J.E.D.I?Advancing Advancing Responsible Use Responsible Use of AI in the of AI in the UniverseUniverseSANS AI Cybersecurity Summit 2025Presented on March 31 by Joy Toney,Senior Program Consultant AIM For Change LLC.“Our department is going to use more AI to gain a competi

2、tive advantage and boost our sales.”“I am a defender.How am I going to make this secure and protect the infrastructure against threat actors?”Image generated by Microsoft Copilot 2025.In our worlds evolving technological landscape,no longer is the role of cybersecurity just to make IT secureNowManag

3、ing risk for the business Making the business resilient“I am an advising partner.I will enable the business to meet its objectives and avoid or reduce risk in the process while considering society,the common good,and public trust.”Image generated by Microsoft Copilot 2025.Potential for Harm by AIInd

4、ividualsGroupsSocietyCompanies/InstitutionsEnvironmentalResponsible AI PrinciplesInclusiveEquitable&FairSafe&SecurePrivacy EnabledAccountable&TransparentValid&ReliableExplainable&InterpretableLegal&CompliantHuman Centric&Human OversightImage generated by Microsoft Copilot 2025.CYBERSECURITY SHOULD L

5、EAD&ENCOURAGE RESPONSIBLE ADOPTION&USE OF AI“Model the way by using vetted AI tools for security testing,malware reduction,endpoint protection,and threat detection and prevention.”Open-Source Testing Toolsprovided by Lior KaplanImage generated by Microsoft Copilot 2025.US NIST AI Risk Management Fra

6、meworkUS NIST Secure Software Development Practices for GAI practices,tasks,recommendations,and considerations specific to AI model development throughout the software development life cycle managing risk of AI use and/or AI development AI